add security note to CHANGELOG

related to #1943
sparklemotion · Nov 17, 2019 · 061d75d · 061d75d
1 parent 1bc2ff9
commit 061d75d
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -2,6 +2,17 @@
 
 ## 1.10.5 / 2019-10-31
 
+### Security
+
+[MRI] Vendored libxslt upgraded to v1.1.34 which addresses three CVEs for libxslt:
+
+* CVE-2019-13117
+* CVE-2019-13118
+* CVE-2019-18197
+
+More details are available at #1943.
+
+
 ### Dependencies
 
 * [MRI] vendored libxml2 is updated from 2.9.9 to 2.9.10